Welcome to the website https://www.elf.com. By connecting to or browsing the website, you agree that you have read, understood and accepted, without limitation or reservation, the personal data and cookies management policy (the “policy”) and our terms and conditions of use. Please note that other terms and conditions and personal data protection policies apply to other TotalEnergies Group websites, and we recommend that you read them carefully.
The policy aims to inform you of the rights and freedoms that you can exercise in respect of our use of your personal data and describes the measures that we take to protect these data.
TotalEnergies Lubrifiants SA is the “data controller” with responsibility for processing the personal data used to manage the website. These processing operations are carried out in accordance with the applicable law.
1. Purpose of processing, legal basis, the period of storage and types of data collected
When you visit the website, you may need to provide us with a number of items of personal data, such as your first name and surname, email address, in order to use the services available.
This processing on your data is based on the consent to provide you services such as improving your experience on the website and answering your various requests. In our online forms, the mandatory fields are marked with an asterisk. If you do not provide answers to the mandatory questions, we will not be able to provide you with the service(s) requested.
Your personal data will not be processed subsequently in a way that is incompatible with the purposes described above or below the collection forms.
Your cookies are kept for no longer than 13 months while your data are kept for a maximum of 3 years since your last contact.
The database is cleaned every 6 months.
2. Recipients of data
| Recipient | Types of data transferred | Purpose of transfer | Country of establishment | Legal basis of transfer |
|---|---|---|---|---|
| Total Lubrifiants | First name, surname, email address, company, postal code, city | Hosting | France | Participation in Privacy Shield, See for instance: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active |
| Total Marketing Services | First name, surname, email address, company, postal code, city | Customer support | Worldwide |
Standard contractual clauses data controller to subcontractor. Total Lubrifiants Secrétariat Général - Contrôle Interne |
Your personal data may be communicated to one or more of the data controller's departments or to Total Group companies and one or more partners, independent distributors or subcontractors such as Total South Africa… for the purposes of analysis and surveys.
If you leave a comment intended to be posted online, we may be required to publish some of your personal data on the website. Given the characteristics of the internet, namely the unrestricted capture of published data and the fact that it is difficult, or even impossible, to control how third parties can use these data, we hereby inform you that you can object to this publication by contacting us as explained in article 5 below.
3. Data Transfers
Any transfer of data to a country outside the European Economic Area shall be carried out in accordance with the applicable regulations and in such a way as to protect your data appropriately.
For the purposes of the services provided on this website, your data (location, contact, mail, first name) may be transferred to the following recipients : subsidiaries located outside the European Union: South Africa, India …
For this reason, the Total Group has adopted “Binding Corporate Rules” (BCR) governing intra-Group transfers of personal data originating in the European Economic Area. For data transfers not covered by the BCR, to countries outside the European Economic Area, other measures to ensure adequate protection are taken.
If you would like more information about our BCRs please click here https://www.total.com/fr/donnees-personnelles. For more information about the other measures taken to ensure adequate protection, please write to the contact address specified below.
4. Data security and confidentiality
The data controller takes appropriate steps to preserve the security and confidentiality of your personal data, including to prevent them from being distorted, damaged or disclosed to unauthorized third parties.
5. Cookie management
5.1. Principle
A cookie is a file which enables a website to save information relating to your computer’s browsing of the website (language previously used by the user on the website, services declined or accepted by the user etc.) to make your visits to the website smoother.
You can at any time delete the cookies stored on your computer, object to the storage of new cookies and receive a notification before new cookies are stored by changing your browser settings using the instructions below (“Types of cookies, cookies and statistics, and settings”).
Please note that if you remove a cookie or object to the storage of cookies on your device, you may not be able to use some of the website's services.
5.2. Types of cookies, cookies and statistics, and settings
The cookies that may be stored on your server when you browse the website are cookies which are intended solely to enable or facilitate electronic communication or which are strictly necessary to provide the service you are requesting (language cookies, login cookies, etc.), or statistics cookies or other cookies in accordance with the conditions below.
When cookies require your agreement before they can be saved, we ask you for this agreement via the “find out more” link displayed on the first page of the website that you land on, in which it is made clear that by continuing to browse the website you accept these cookies.
- Which cookies are stored ?
Cookies issued by the data controller
| Cookie | Description | How do you object? | Period |
|---|---|---|---|
| Drupal.language | Language previously used by the user on the website. Change every time the language is changed | See article How do you delete cookies, receive notification of their storage or change your browser settings? | 7 days |
| Drupal_language_redirection | Drupal configuration cookie (redirection according to the language) | See article How do you delete cookies, receive notification of their storage or change your browser settings? | 7 days |
| Drupal.tableDrag.showWeight | Drupal configuration cookie | See article How do you delete cookies, receive notification of their storage or change your browser settings? | 13 months |
| has_js | Drupal configuration cookie | See article How do you delete cookies, receive notification of their storage or change your browser settings? | 13 months |
| splash_screen | Save the choice (redirection link) of the user if the spash screen | See article How do you delete cookies, receive notification of their storage or change your browser settings? | 13 months |
| authorized_config | Used to know which services has been decline or accepted by the user | See article How do you delete cookies, receive notification of their storage or change your browser settings? | 13 months |
| Cookie-agreed | Save the choice of the cookies acceptance | See article How do you delete cookies, receive notification of their storage or change your browser settings? | 13 months |
Cookies issued by third parties
| Cookie | Description | How do you object? | Period |
|---|---|---|---|
| utag_main (Tealium) |
Used by Tealium | article How do you delete cookies, receive notification of their storage or change your browser settings? | 13 months |
| _unam (ShareThis) |
Cookie installed by Share This to allow content sharing | article How do you delete cookies, receive notification of their storage or change your browser settings? | 13 months |
| Idrxvr (ATINTERNET) |
Allows to see how many visitors come to the site and how often | http://www.xiti.com/en/optout.aspx or see article How do you delete cookies, receive notification of their storage or change your browser settings? | 7 months |
|
_kuid_ |
Measure site audiences to improve insights of our users and perform targeted advertising | https://www.salesforce.com/products/marketing-cloud/sfmc/audience-studi… | 13 months |
| Google Ads "NID" | Allow to collect customer journey data in order to suggest targeted ads with the Google tools such as Google Ads | https://optout.networkadvertising.org/?c=1 | 6 months |
| atuserid | Client-side visitor ID cookie (overrides server-side) | 6 months for France and 13 months out of France | |
| Atauthority | CNIL exemption cookie that allows the storage/recording of visitor consent | 6 months for France and 13 months out of France | |
| Idirxvr | Historical visitor ID (backup server-side visitor ID cookie) | 13 months for France and 13 months out of France | |
| Atidx | Secured visitor ID (backup server-side visitor ID cookie) | 13 months for France and 13 months out of France | |
| Atid | Main visitor ID (backup serverside visitor ID cookie) | 13 months for France and 13 months out of France | |
| Atreman | Keeps a prior attribution campaign in memory | 30 days for France and 30 days out of France | |
| Atsession | List of new campaigns encountered during a visit, in order to avoid measuring the same campaign several times | 30 days for France and 30 days out of France |
Statistics cookies are used to measure the number of visits, the number of pages viewed, users’ activity on the website and how often they return. The used statistics tool, AT Internet, which is stored for no longer than 13 months. Your IP address is also collected in order to determine the town/city from which you are accessing the website. Your IP address is immediately anonymized after use so that you cannot be identified as a natural person. The statistical data on website visits are collected by the provider AT Internet and subsequently transferred to the data controller in an aggregated and anonymized form in a web interface to which it alone has access. The data collected are not transferred to third parties or used for other purposes. You can block these cookies at any time by opting out as described above by clicking following links :
http://www.xiti.com/en/optout.aspx
5.2.2. How do you delete cookies, receive notification of their storage or change your browser settings?
- How do you delete cookies already stored on your computer?
- On your workstation:
- On the C:\ drive select the Windows folder;
- Open the “Temporary Internet Files” folder;
- Select all files (CTRL A);
- Choose the “delete” option.
- On your workstation:
- How do you change browser settings to reject or be informed of the storage of cookies?
- In the Internet Explorer 5 (Microsoft) browser: Select “Tools”, and then “Internet Options”. Click on the “Security” tab, then “Custom level” and scroll down to the “cookies” section. Next to “Allow cookies that are stored on your computer” select “Ask” to be notified or “Disable” to decline all cookies;
- In the Internet Explorer 6, 7 or 8 (Microsoft) browser: Select “Tools”, “Internet Options”, “Privacy”, then the level you wish to apply;
- In the Firefox browser: Click on “Tools” and select “Options”. In the “Privacy and security” tab, untick the box “Accept cookies from websites”;
- In the Chrome (Google) browser: Click “Customize and control Google Chrome” and select “Settings”. Under “Privacy and security”, click on “Content settings” and enable “Block third-party cookies”.
6.Your rights/Contact
In accordance with current regulations, you have the right to access, correct, delete and object to the use of your personal data.
You can ask for your personal data to be sent to you and you have the right to give instructions for the use of your personal data after your death. You can also ask for restriction of the data. Please send your request by contacting a member of the team responsible for personal data protection:
TotalEnergies Lubrifiants
Communication Digitale
562 avenue du Parc de l’Ile,
92029 Nanterre Cedex